CVE-2026-92524

What it actually does

Failure in its_irq_gic_domain_alloc() leaves its_vpe_irq_domain_free() unable to call its_vpe_teardown(), leaking VPE interrupt resources in the GIC-v3 ITS driver.

Why it matters to the business

Repeated allocation failures under load can gradually exhaust kernel memory and interrupt-related resources, leading to degraded stability or denial-of-service conditions on affected Linux systems over time.

How an attack unfolds

An attacker with local access triggers repeated failures in the ITS VPE interrupt domain allocation path; the missing teardown call in the error handler accumulates leaked resources until the system becomes unstable.

How to fix it

Apply the upstream kernel patch that invokes its_vpe_teardown() in the its_vpe_irq_domain_alloc() error path; update to a kernel release containing the fix once available.

How to confirm the fix worked

Confirm the presence of the call to its_vpe_teardown() inside the error-handling block of its_vpe_irq_domain_alloc() in the irqchip/gic-v3-its.c source; monitor for resource-leak symptoms under synthetic allocation-failure workloads.

Typical attack path

1. Obtain local code execution on a Linux system using the affected GIC-v3 ITS driver.
2. Induce repeated failures in its_irq_gic_domain_alloc() through crafted interrupt or device operations.
3. Allow the error path in its_vpe_irq_domain_free() to execute without teardown, accumulating leaks.
4. Continue until kernel resources are exhausted, causing denial of service.

How to detect it

Review kernel logs for repeated its_vpe_irq_domain_alloc failures; inspect memory and IRQ allocation counters for unexplained growth; no specific post-exploitation artifacts are known.

What your security team should do

• Prioritize kernel updates for systems exposing GIC-v3 ITS hardware once fixed releases are published.
• Monitor kernel memory and interrupt allocation metrics for gradual growth patterns on affected platforms.
• Limit untrusted local code execution where feasible until patches are applied.